Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

Bugtraq ID:	48470
Class:	Boundary Condition Error
CVE:	CVE-2011-2220
Remote:	Yes
Local:	No
Published:	Jun 28 2011 12:00AM
Updated:	Jul 21 2011 10:10PM
Credit:	gwslabs.com
Vulnerable:	Novell Novell File Reporter 1.0.2 Novell Novell File Reporter 1.0.1 Novell Novell File Management Suite 2.2 Novell Novell File Management Suite 2.1 Novell Novell File Management Suite 2 Novell Novell File Management Suite 1.1
Not Vulnerable:

Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

The Novell File Reporter Engine is prone to a remote code-execution vulnerability.

Successfully exploiting this issue will allow attackers to execute arbitrary code with elevated privileges, completely compromising affected computers. Failed exploit attempts may result in a denial-of-service condition.

The following products are vulnerable:

Novell File Reporter 1.0.2
Novell File Reporter 1.0.1
Novell File Management Suite 2
Novell File Management Suite 1.1
Novell File Management Suite 2.2
Novell File Management Suite 2.1

Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

Solution:
Updates are available; please see the references for more information.

Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

References:

• Novell File Reporter Engine Security Patch 1.0.2.53 (Novell)
  
• ZDI-11-227: Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution (HP)